Tyk
Tyk is a leading Open Source API Gateway and Management Platform, featuring an API gateway, analytics, developer portal and dashboard. We power billions of transactions for thousands of innovative organisations.
By making our capabilities easily accessible to developers, we make it fast, simple and low-risk for big enterprises to manage their APIs, adopt microservices and adopt GraphQL.
Whether self-managed, cloud or a hybrid, our unique architecture and capabilities enable large, complex, global organisations to quickly deliver highly secure, highly regulated API-first applications and products that span multiple clouds and geographies.
Learn more
Gravitee
Gravitee is an AI agent management and API management platform designed to secure, observe, and govern interactions between AI agents, models, APIs, event streams, and enterprise services. Its AI Gateway provides centralized control for LLM traffic, MCP tool access, and agent-to-agent communication through LLM Proxy, MCP Proxy, and A2A Proxy capabilities. The platform can enforce authentication, authorization, least-privilege access, PII redaction, rate limits, spending controls, and audit logging across AI traffic. Gravitee also provides visibility into agent behavior, token consumption, dependencies, costs, and usage patterns so organizations can identify shadow AI and unmonitored workloads. Beyond AI governance, the platform manages APIs and event streams, including REST, GraphQL, gRPC, Kafka, and related enterprise integration patterns. Gravitee is designed for organizations that want a unified control layer for AI agents, APIs, events, and model access.
Learn more
Akto
Akto is an open source API security in CI/CD platform. Key features of Akto include:
1. API Discovery
2. API Security Testing
3. Sensitive Data Exposure
4. API Security Posture Management
5. Authentication and Authorization
6. API Security in DevSecOps
Akto helps developers and security teams secure APIs in their CI/CD by continuously discovering and testing APIs for vulnerabilities. Akto's pricing is transparent on website. Free tier is available. You can deploy both self-hosted and in cloud.
It takes only few mins to deploy and see results. Akto can integrate with multiple traffic sources - Burpsuite, AWS, postman, GCP, gateways, etc.
Learn more
BoxyHQ
Security Building Blocks for Developers.
BoxyHQ offers a suite of open-source APIs for security and privacy, helping engineering teams build and ship compliant applications faster, reducing Time to Market without sacrificing their security posture.
1. Enterprise Single Sign On (SAML/OIDC SSO)
2. Directory Sync
3. Audit Logs
4. Data Privacy Vault (PII, PCI, PHI compliant)
Learn more